Digi TX64 User manual

TX64
User Guide

Revision history—90002348
Revision Date Description
A November 2019 Initial release of DigiTX64 firmware version 19.11.
B February 2020 Release of DigiTX64 firmware version 20.2:
nDigi SureLinkTM support (formerly known as active
recovery).
lEnabled by default on preconfigured WANs and
WWANs.
nRole-based user access.
lAllow shell option added to authentication.
lRead-only access option added to user configuration.
TX64 User Guide 2

Revision Date Description
C June, 2020 Release of Digi TX64 firmware version 20.5:
nSupport for LDAP user authentication.
nPreconfigured Wi-Fi SSIDand password enabled by
default.
lThe default SSID for both of the access points is:
Digi-TX64-serial_number
lDefault password is the unique password as found on
the device's label.
You will need to change the SSIDand password before
any configuration changes can be saved.
nWi-Fi client isolation options.
nFirmware installation from the Digi firmware server.
nEnhanced Digi Remote Manager support:
lSupport for remote proxy server for Digi Remote
Manager.
lWatchdog support for connection to Digi Remote
Manager.
lLocally authenticate CLI option added to Digi
Remote Manager configuration to control whether a
user is required to provide device-level authentication
when accessing the console of the device through
Digi Remote Manager.
lAdded a randomized two minute delay window for
uploading health metrics to the Digi Remote Manager
to avoid situations where multiple devices are
uploading metrics at the same time.
nEnhanced Python support:
lSupport for the Python serial module to allow
programmatic access to serial ports.
lSupport for the Python HID module to allow
programmatic access to a USB Human Interface
Device (HID) from within a Python script.
nApplication mode for serial ports to allow for Python
programmatic control.
Trademarks and copyright
Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United
States and other countries worldwide. All other trademarks mentioned in this document are the
property of their respective owners.
© 2020 Digi International Inc. All rights reserved.
TX64 User Guide 3

Disclaimers
Information in this document is subject to change without notice and does not represent a
commitment on the part of Digi International. Digi provides this document “as is,” without warranty of
any kind, expressed or implied, including, but not limited to, the implied warranties of fitness or
merchantability for a particular purpose. Digi may make improvements and/or changes in this manual
or in the product(s) and/or the program(s) described in this manual at any time.
Warranty
To view product warranty information, go to the following website:
www.digi.com/howtobuy/terms
Customer support
Gather support information: Before contacting Digi technical support for help, gather the following
information:
Product name and model
Product serial number (s)
Firmware version
Operating system/browser (if applicable)
Logs (from time of reported issue)
Trace (if possible)
Description of issue
Steps to reproduce
Contact Digi technical support: Digi offers multiple technical support plans and service packages.
Contact us at +1 952.912.3444 or visit us at www.digi.com/support.
Feedback
To provide feedback on this document, email your comments to
[e-mail]
Include the document title and part number (TX64 User Guide, 90002348 C) in the subject line of your
email.
TX64 User Guide 4

Contents
Revision history—90002348 2
What's new in Digi TX64 version 20.5
Digi TX64 Quick start
Quick start using the Digi Remote Manager mobile app 15
Step 1: What's in the box 15
Step 2: Gather accessories 16
Step 3: Connect 17
Step 4: Power up 18
Step 5: Configure 18
Digi TX64 hardware reference
TX64 key features 19
TX64 hardware specifications 19
TX64 front view 19
TX64 LEDs 20
Power 20
GNSS Service 20
Wi-Fi1 Service 20
Wi-Fi2 Service 20
WWAN1/WWAN2 Signal 20
WWAN1/WWAN2 Service 20
Ethernet 1-4 Link and Activity (on rear panel) 21
Power sensor and button behavior 21
TX64 back view 21
Digi TX64 serial connector pinout 22
Hardware setup
Install SIM cards 24
Tips for improving cellular signal strength 24
Connect data cables 24
Connect antennas 24
Mount the TX64 to a mounting surface 25
Connect power 25
Mount and ground chassis 26
TX64 electrical rating 26
TX64 User Guide 5

TX64 User Guide 6
TX64 power connector 27
Configuration and management
Review TX64 default settings 29
Local WebUI 29
Digi Remote Manager 29
Default interface configuration 29
Other default configuration settings 31
Reset default password for the default admin user 32
Reset default SSIDs and pre-shared keys for the preconfigured Wi-Fi access points 33
Configuration methods 35
Using Digi Remote Manager 36
Access Digi Remote Manager 36
Using the web interface 36
Log out of the web interface 37
Using the command line 38
Access the command line interface 38
Log in to the command line interface 38
Exit the command line interface 39
Interfaces
Wide Area Networks (WANs) 41
Wide Area Networks (WANs) and Wireless Wide Area Networks (WWANs) 42
Configure WAN/WWAN priority and default route metrics 42
WAN/WWAN failover 45
Configure SureLink active recovery to detect WAN/WWAN failures 46
Configure the device to reboot when a failure is detected 53
Disable SureLink 59
Example: Use a ping test for WAN failover from Ethernet to cellular 63
Using Ethernet devices in a WAN 67
Using cellular modems in a Wireless WAN (WWAN) 67
Configure a Wide Area Network (WAN) 82
Configure a Wireless Wide Area Network (WWAN) 89
Show WAN and WWAN status and statistics 98
Delete a WAN or WWAN. 99
Local Area Networks (LANs) 102
About Local Area Networks (LANs) 103
Configure a LAN 103
Example: Configure two LANs 110
Show LAN status and statistics 118
Delete a LAN 120
DHCP servers 121
Create a Virtual LAN (VLAN) route 137
Bridging 141
Edit the preconfigured LAN1 bridge 142
Configure a bridge 145
Serial port
Configure the serial port 150
Add a USB serial port 160

TX64 User Guide 7
Show serial status and statistics 174
Wi-Fi
Wi-Fi configuration 177
Default access point SSID and password 177
Default Wi-Fi configuration 177
Configure the Wi-Fi module channel 179
Configure the Wi-Fi module band and protocol 181
Configure a Wi-Fi access point with no security 183
Configure a Wi-Fi access point with personal security 189
Configure a Wi-Fi access point with enterprise security 195
Isolate Wi-Fi clients 203
Isolate clients connected to the same access point 203
Isolate clients connected to different access points 204
Show Wi-Fi access point status and statistics 211
Configure a Wi-Fi client and add client networks 212
Show Wi-Fi client status and statistics 219
Hotspot
Hotspot authentication modes 222
Hotspot DHCP server 223
Hotspot security 223
Hotspot configuration 224
Enable hotspot using the default configuration 225
Change the default hotspot SSID 230
Change the default hotspot IP address and subnet 232
Change the default hotspot bandwidth limits 235
Add an Ethernet port to the default hotspot 237
Create a new hotspot 240
Configure the hotspot to use local shared password authentication 252
Configure the hotspot to use RADIUSshared password authentication 254
Configure the hotspot to use RADIUS users authentication 258
Configure the hotspot to use HotspotSystem authentication 262
Show hotspot status and statistics 266
Customize the hotspot login page 267
Edit sample hotspot HTML pages 269
Upload custom hotspot HTML pages 270
Restore hotspot default sample pages 272
Hotspot RADIUS attributes 273
Routing
IP routing 275
Configure a static route 276
Delete a static route 279
Policy-based routing 281
Configure a routing policy 281
Example: Dual WAN policy-based routing 290
Example: Route traffic to a specific WAN interface based on the client MACaddress 293
Routing services 298
Configure routing services 299

TX64 User Guide 8
Show the routing table 301
Dynamic DNS 303
Configure dynamic DNS 303
Virtual Router Redundancy Protocol (VRRP) 309
Configure VRRP 309
Show VRRP status and statistics 313
Virtual Private Networks (VPN)
IPsec 315
IPsec data protection 315
IPsec modes 315
Internet Key Exchange (IKE) settings 315
Authentication 316
Configure an IPsec tunnel 316
Configure IPsec failover 338
Configure SureLink active recovery for IPsec 339
Show IPsec status and statistics 346
Configure a Simple Certificate Enrollment Protocol client 347
Example: SCEP client configuration with Fortinet SCEP server 351
OpenVPN 357
Configure an OpenVPN server 358
Configure an OpenVPN Authentication Group and User 367
Configure an OpenVPN client by using an .ovpn file 371
Configure an OpenVPN client without using an .ovpn file 374
Configure active recovery for OpenVPN 378
Show OpenVPN server status and statistics 385
Show OpenVPN client status and statistics 386
Generic Routing Encapsulation (GRE) 388
Configuring a GREtunnel 388
Show GRE tunnels 394
Example: GRE tunnel over an IPSec tunnel 395
Services
Allow remote access for web administration and SSH 412
Configure the web administration service 416
Configure SSHaccess 424
Use SSH with key authentication 430
Generating SSH key pairs 430
Configure telnet access 433
Configure DNS 438
Simple Network Management Protocol (SNMP) 445
SNMP Security 445
Configure Simple Network Management Protocol (SNMP) 445
Download MIBs 450
Location information 451
Configure the location server 452
Enable or disable the internal GNSS module 456
Use a dead reckoning external USB GNSS receiver 458
Configure the device to accept location messages from external sources 459
Forward location information to a remote host 465
Show location information 472
System time 473

TX64 User Guide 9
Configure the system time 473
Network Time Protocol 476
Configure the device as an NTP server 476
Configure a multicast route 482
Enable service discovery (mDNS) 485
Use the iPerf service 488
Example performance test using Iperf3 493
Applications
Configure applications to run automatically 496
Task one: Upload the application 496
Task two: Configure the application to run automatically 498
Run a Python application at the shell prompt 502
Start an interactive Python session 504
Digidevice module 506
Use digidevice.cli to execute CLI commands 507
Use digidevice.datapoint to upload custom datapoints to Digi Remote Manager 508
Use digidevice.config for device configuration 510
Use Python to respond to Digi Remote Manager SCI requests 512
Use digidevice runtime to access the runtime database 521
Using Python to upload the device name to Digi Remote Manager 523
The digidevice led submodule 525
Hid module 527
Help for the hid module 528
Use Python to access serial ports 528
User authentication
TX64 user authentication 531
User authentication methods 531
Add a new authentication method 533
Delete an authentication method 535
Rearrange the position of authentication methods 537
Authentication groups 539
Change the access rights for a predefined group 540
Add an authentication group 542
Delete an authentication group 546
Local users 548
Change a local user's password 549
Configure a local user 551
Delete a local user 558
Terminal Access Controller Access-Control System Plus (TACACS+) 560
TACACS+ user configuration 561
TACACS+ server failover and fallback to local authentication 562
Configure your TX64 device to use a TACACS+ server 562
Remote Authentication Dial-In User Service (RADIUS) 568
RADIUS user configuration 569
RADIUS server failover and fallback to local configuration 569
Configure your TX64 device to use a RADIUS server 570
LDAP 575
LDAP user configuration 576
LDAP server failover and fallback to local configuration 577
Configure your TX64 device to use an LDAP server 577

TX64 User Guide 10
Disable shell access 582
Set the idle timeout for TX64 users 583
Example user configuration 586
Example 1: Administrator user with local authentication 586
Example 2: RADIUS, TACACS+, and local authentication for one user 588
Firewall
Firewall configuration 596
Create a custom firewall zone 596
Configure the firewall zone for a network interface 598
Delete a custom firewall zone 600
Port forwarding rules 601
Configure port forwarding 601
Delete a port forwarding rule 606
Packet filtering 609
Configure packet filtering 609
Enable or disable a packet filtering rule 613
Delete a packet filtering rule 615
Configure custom firewall rules 617
Configure captive portals 619
Delete captive portals 623
Configure Quality of Service options 624
Web filtering 635
Configure web filtering with Cisco Umbrella 635
Configure web filtering with manual DNS servers 638
Verify your web filtering configuration 641
Show web filter service information 643
System administration
Review device status 646
Configure system information 647
Update system firmware 649
Manage firmware updates using Digi Remote Manager 649
Certificate management for firmware images 650
Update cellular module firmware 652
Reboot your TX64 device 653
Reboot your device immediately 653
Schedule reboots of your device 654
Reset the device to factory defaults 655
Configure power delays for power ignition sensor 658
Configure power button behavior 660
Configure automatic reboot behavior for temporary power drop 663
Configuration files 665
Save configuration changes 665
Save configuration to a file 666
Restore the device configuration 667
Schedule system maintenance tasks 670
Monitoring
intelliFlow 678

TX64 User Guide 11
Enable intelliFlow 678
Use intelliFlow to display average CPU and RAMusage 681
Use intelliFlow to display top data usage information 682
Use intelliFlow to display data usage by host over time 684
Configure NetFlow Probe 685
Enable the Bluetooth scanner 690
Display the output of the Bluetooth scanner. 695
Enable the Wi-Fi scanner 697
Required configuration 697
Additional configuration 697
Display the output of the Wi-Fi scanner. 703
Central management with Digi Remote Manager
Digi Remote Manager support 707
Configure Digi Remote Manager 707
Collect device health data and set the sample interval 713
Log into Digi Remote Manager 715
Use Digi Remote Manager to view and manage your device 716
Add a device to Digi Remote Manager 717
View Digi Remote Manager connection status 717
Use the Digi Remote Manager mobile app 718
Configure multiple devices using profiles 719
Learn more 719
File system
The TX64 local file system 721
Display directory contents 721
Create a directory 722
Display file contents 723
Copy a file or directory 723
Move or rename a file or directory 724
Delete a file or directory 725
Upload and download files 726
Upload and download files by using the WebUI 726
Upload and download files by using the Secure Copy command 727
Upload and download files using SFTP 728
Diagnostics
Generate a support report 731
View system event logs 732
View System Logs 732
View Event Logs 735
Configure syslog servers 737
Configure options for the event and system logs 739
Analyze network traffic 744
Configure packet capture for the network analyzer 745
Example filters for capturing data traffic 749
Capture packets from the command line 750
Stop capturing packets 751
Show captured traffic data 752

TX64 User Guide 12
Save captured data traffic to a file 753
Download captured data to your PC 754
Clear captured data 755
Use the ping command to troubleshoot network connections 757
Ping to check internet connection 757
Stop ping commands 757
Use the traceroute command to diagnose IProuting problems 757
Digi TX64 regulatory and safety statements
RF exposure statement 759
Federal Communication (FCC) Part 15 Class B 759
Radio Frequency Interference (RFI) (FCC 15.105) 759
European Community - CE Mark Declaration of Conformity (DoC) 759
CE mark (Europe) 760
Maximum transmit power for radio frequencies 761
Innovation, Science, and Economic Development Canada (IC) certifications 761
RoHS compliance statement 762
Safety statements 762
Special safety notes for wireless routers 763
Product disposal instructions 764
DigiTX64 Certifications
International EMC (Electromagnetic Compatibility) and safety standards 765
Command line interface
Access the command line interface 767
Log in to the command line interface 767
Exit the command line interface 768
Execute a command from the web interface 768
Display help for commands and parameters 769
The help command 769
The question mark (?) command 769
Display help for individual commands 770
Use the Tab key or the space bar to display abbreviated help 771
Auto-complete commands and parameters 771
Available commands 773
Use the scp command 774
Display status and statistics using the show command 775
show config 775
show system 776
show network 776
Device configuration using the command line interface 777
Execute configuration commands at the root Admin CLI prompt 777
Display help for the config command from the root Admin CLI prompt 777
Configuration mode 779
Enable configuration mode 779
Enter configuration commands in configuration mode 779
Save changes and exit configuration mode 780
Exit configuration mode without saving changes 780
Configuration actions 780

TX64 User Guide 13
Display command line help in configuration mode 781
Move within the configuration schema 784
Manage elements in lists 784
The revert command 787
Enter strings in configuration commands 788
Example: Create a new user by using the command line 789
Example: Configure multiple WANs and LANs by using the command line 790
Command line reference 801
analyzer 802
cp 803
help 804
ls 805
mkdir 806
modem 807
modem puk status [imei STRING] [name STRING] 810
more 812
mv 813
ping 814
reboot 815
rm 816
scp 817
show 818
system 826
traceroute 828
update 831

What's new in Digi TX64 version 20.5
Release of Digi TX64 firmware version 20.5:
nSupport for LDAP user authentication.
nPreconfigured Wi-Fi SSIDand password enabled by default.
lThe default SSID for both of the access points is:
Digi-TX64-serial_number
lDefault password is the unique password as found on the device's label.
You will need to change the SSIDand password before any configuration changes can be saved.
nWi-Fi client isolation options.
nFirmware installation from the Digi firmware server.
nEnhanced Digi Remote Manager support:
lSupport for remote proxy server for Digi Remote Manager.
lWatchdog support for connection to Digi Remote Manager.
lLocally authenticate CLI option added to Digi Remote Manager configuration to control
whether a user is required to provide device-level authentication when accessing the
console of the device through Digi Remote Manager.
lAdded a randomized two minute delay window for uploading health metrics to the Digi
Remote Manager to avoid situations where multiple devices are uploading metrics at the
same time.
nEnhanced Python support:
lSupport for the Python serial module to allow programmatic access to serial ports.
lSupport for the Python HID module to allow programmatic access to a USB Human
Interface Device (HID) from within a Python script.
nApplication mode for serial ports to allow for Python programmatic control.
TX64 User Guide 14

Digi TX64 Quick start
The following steps guide you through the setup of your DigiTX64 device.
Quick start using the Digi Remote Manager mobile app
After connecting your hardware and powering up, you can use the Digi Remote Manager mobile app to
quickly install your TX64 into your Digi Remote Manager account.
Here's how:
If you already have a Digi Remote Manager account:
1. Download the Digi Remote Manager mobile app from the App Store (iPhone) or Google Play
(Android).
2. Click Log in or Sign Up and log in to your account.
3. From the menu, select Install a device with a QR or bar code and scan the installation QR
code on the label.
4. Follow the prompts to complete your TX64 registration.
If you need to sign up for a Digi Remote Manager account:
1. Click here to create a new account. You'll receive an email with login instructions.
2. On your smartphone or tablet, download the Digi Remote Manager mobile app from the App
Store (iPhone) or Google Play (Android).
3. Open the Digi Remote Manager mobile app, click Log in and log into your new account.
4. From the menu, select Install a device with a QR or bar code and scan the installation QR
code on the label.
5. Follow the prompts to complete your TX64 registration.
Step 1: What's in the box
When you open the TX64 package, look for the following:
nDigi TX64 device
The Digi TX64 has a product label on the bottom of the device. The label includes product
identification information and the default password assigned to the device.
TX64 User Guide 15

Digi TX64 Quick start Step 2: Gather accessories
TX64 User Guide 16
nAntennas
Two cellular antenna are included. For the Wi-Fi-enabled TX64W device, a Wi-Fi antenna is also
included.
nPower supply and adapters
nEthernet cable
nInsert cards
nDigi TX64 label
Printed copy of the product label on the bottom of your device. You can affix this label to the
top or side of the device such that you can access the label after the device is mounted, or
store the label in a safe place for future reference.
nDigi COREmodem label
Printed copy of the COREmodem label on the bottom of your COREmodem. You can affix this
label to the top or side of the device such that you can access the label after the device is
mounted, or store the label in a safe place for future reference.
Step 2: Gather accessories
Digi offers several TX64 accessory kits so you can purchase exactly what you need to support your
TX64. See TX64 support for a list of accessory kits.
Here's the list of accessories used in this Quick start:
Antennas
Use antennas provided by a Digi accessory kit or use alternate antennas that
comply with the TX64 antenna requirements.
Ethernet cable(s)
nIf you intend to configure Ethernet WANaccess at this time, use an
Ethernet cable to connect the TX64 WAN/ETH1 port to a WAN.
nUse an Ethernet cable to connect the TX64 ETH2 port to a laptop or PC to
access the local web interface via a browser.

Digi TX64 Quick start Step 3: Connect
TX64 User Guide 17
Phillips-head screwdriver
Use a #1 Phillips-head screwdriver to remove and replace the SIM gasket cover
when installing SIM cards.
Power supply
Use a power supply provided by a Digi accessory kit or use an alternate power
supply that complies with the power supply requirements.
Laptop or personal computer
Use an Ethernet cable to connect your TX64 to a laptop or PC.
SIM card(s)
If you intend to configure cellular WWAN access at this time, acquire SIM cards as
needed. Note the carrier, network APN (Access Point Name), and SIM pin (if any)
for each card.
Smart phone or tablet
Optional: Use a smart phone or table to to automatically register your TX64 in
your Digi Remote Manager account and connect to your cellular network. See
Quick start using the Digi Remote Manager mobile app.
Step 3: Connect
a. If you intend to configure cellular WWAN access at this time, Install SIM cards.
b. Attach antenna(s).
c. If you intend to configure Ethernet WAN access at this time, use an Ethernet cable to connect

Digi TX64 Quick start Step 4: Power up
TX64 User Guide 18
the TX64 WAN/ETH1 port to a hub with access to the Internet.
d. Use an Ethernet cable to connect the TX64 ETH2 port to your PC.
Step 4: Power up
a. Connect DC power.
Note If you need help understanding power requirements, see TX64 power connector.
b. Indicator LEDs blink to show status during startup.
c. Wait for the power LED to stop blinking. The device is ready.
Step 5: Configure
a. On the PC connected to the TX64, open a browser and go to 192.168.2.1.
b. Log into the TX64:
User name: Use the default user name: admin.
Password: Use the unique password printed on the bottom label of the device (or the printed
label included in the package).

Digi TX64 hardware reference
TX64 key features
The Digi TX64 is an LTE-Advanced (LTE-A) router. Key features include:
nWired Gigabit Ethernet (4-port) for onboard systems.
nSegmented private versus public data communication across dual 600 Mbps CAT11 cellular.
nVideo offload over 1.7 Gbps 802.11ac Wi-Fi backhaul.
nPassenger Wi-Fi over 867 Mbps 802.11ac access point.
nSuperior network performance management through Digi Remote Manager.
nGlobal deployment support.
TX64 hardware specifications
For a detailed list of TX64 hardware specifications, see Digi TX64 specifications.
TX64 front view
The following figure shows front view of the TX64.
Item Decription
SIM gasket See Install SIM cards.
LEDs See TX64 LEDs.
Power button See Power sensor and button behavior.
TX64 User Guide 19

Digi TX64 hardware reference TX64 LEDs
TX64 User Guide 20
TX64 LEDs
The TX64 LEDs are located on the top front panel. The number of LEDs varies by model. During bootup,
the front-panel LEDs light up in sequence to indicate boot progress.
Power
nOff: No power.
nBlinking Blue: Unit is powering on.
nBlue: Unit has power.
GNSS Service
nSolid Green: GNSS is enabled and has a valid fix.
nBlinking Green: GNSS is enabled but does not have a valid fix.
nOff: GNSS is not enabled.
Wi-Fi1 Service
nSolid Green: Wi-Fi access points or Wi-Fi clients using Wi-Fi1 radio are enabled.
nOff: No Wi-Fi access points or Wi-Fi clients using Wi-Fi1 radio are enabled.
Wi-Fi2 Service
nSolid Green: Wi-Fi access points or Wi-Fi clients using Wi-Fi2 radio are enabled.
nOff: No Wi-Fi access points or Wi-Fi clients using Wi-Fi2 radio are enabled.
WWAN1/WWAN2 Signal
Indicates strength of cellular signal.
nOff: No service.
nYellow: Poor / Fair signal.
nGreen: Good / Excellent signal.
WWAN1/WWAN2 Service
Indicates the presence and level of cellular service running on the device.
nOff: No service.
nBlinking Green: 2G/3G/4G connection is coming up.
nSolid Yellow: 2G or 3G connection is up.
nSolid Green: 4G connection is up.